v19.9.5

Update dependency docker/buildx to v0.20.1

Notable changes

• David Karlsson
• Jonathan A. Sternberg
• Tõnis Tiigi
• CrazyMax
• Fix bake --print output missing some attributes for attestations #​2937
• Fix allowing comma separated image reference strings for cache import and export values #​2944

docker/buildx (docker/buildx)

v0.20.1

Compare Source

Welcome to the v0.20.1 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

• David Karlsson
• Jonathan A. Sternberg
• Tõnis Tiigi
• CrazyMax

Notable Changes

• Fix bake --print output missing some attributes for attestations #​2937
• Fix allowing comma separated image reference strings for cache import and export values #​2944

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.20.0

List of commits

3eb364a (Update dependency docker/buildx to v0.20.1, 2025-01-28)
593c351 (Avoid empty set cache args passed to docker bake, 2025-02-03)

v19.9.4

Update actions/setup-python action to v5.4.0

Notable changes

• Update cache error message by @​aparnajyothi-y in https://github.com/actions/setup-python/pull/968
• Enhance Workflows: Add Ubuntu-24, Remove Python 3.8 by @​priya-kinthali in https://github.com/actions/setup-python/pull/985
• Configure Dependabot settings by @​HarithaVattikuti in https://github.com/actions/setup-python/pull/1008
• Readme update - recommended permissions by @​benwells in https://github.com/actions/setup-python/pull/1009
• Improve Advanced Usage examples by @​lrq3000 in https://github.com/actions/setup-python/pull/645
• Upgrade undici from 5.28.4 to 5.28.5 by @​dependabot in https://github.com/actions/setup-python/pull/1012
• Upgrade urllib3 from 1.25.9 to 1.26.19 in /tests/data by @​dependabot in https://github.com/actions/setup-python/pull/895
• Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @​dependabot in https://github.com/actions/setup-python/pull/1014
• Upgrade @actions/http-client from 2.2.1 to 2.2.3 by @​dependabot in https://github.com/actions/setup-python/pull/1020
• Upgrade requests from 2.24.0 to 2.32.2 in /tests/data by @​dependabot in https://github.com/actions/setup-python/pull/1019
• Upgrade @actions/cache to ^4.0.0 by @​priyagupta108 in https://github.com/actions/setup-python/pull/1007
• @​benwells made their first contribution in https://github.com/actions/setup-python/pull/1009
• @​HarithaVattikuti made their first contribution in https://github.com/actions/setup-python/pull/1008
• @​lrq3000 made their first contribution in https://github.com/actions/setup-python/pull/645

actions/setup-python (actions/setup-python)

v5.4.0

Compare Source

What's Changed

Enhancements:

• Update cache error message by @​aparnajyothi-y in https://github.com/actions/setup-python/pull/968
• Enhance Workflows: Add Ubuntu-24, Remove Python 3.8 by @​priya-kinthali in https://github.com/actions/setup-python/pull/985
• Configure Dependabot settings by @​HarithaVattikuti in https://github.com/actions/setup-python/pull/1008

Documentation changes:

• Readme update - recommended permissions by @​benwells in https://github.com/actions/setup-python/pull/1009
• Improve Advanced Usage examples by @​lrq3000 in https://github.com/actions/setup-python/pull/645

Dependency updates:

• Upgrade undici from 5.28.4 to 5.28.5 by @​dependabot in https://github.com/actions/setup-python/pull/1012
• Upgrade urllib3 from 1.25.9 to 1.26.19 in /tests/data by @​dependabot in https://github.com/actions/setup-python/pull/895
• Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @​dependabot in https://github.com/actions/setup-python/pull/1014
• Upgrade @actions/http-client from 2.2.1 to 2.2.3 by @​dependabot in https://github.com/actions/setup-python/pull/1020
• Upgrade requests from 2.24.0 to 2.32.2 in /tests/data by @​dependabot in https://github.com/actions/setup-python/pull/1019
• Upgrade @actions/cache to ^4.0.0 by @​priyagupta108 in https://github.com/actions/setup-python/pull/1007

New Contributors

• @​benwells made their first contribution in https://github.com/actions/setup-python/pull/1009
• @​HarithaVattikuti made their first contribution in https://github.com/actions/setup-python/pull/1008
• @​lrq3000 made their first contribution in https://github.com/actions/setup-python/pull/645

Full Changelog: actions/setup-python@v5...v5.4.0

List of commits

ebdc151 (Update actions/setup-python action to v5.4.0, 2025-01-28)

v19.9.3

Update aws-actions/configure-aws-credentials action to v4.0.3

Notable changes

• added release-please action config (0f88004)
• add id-token permission to automerge (97834a4)
• cpy syntax on npm package (#​1195) (83b5a56)
• force push packaged files to main (bfd2185)
• release 4.0.3 (ca00fd4)

aws-actions/configure-aws-credentials (aws-actions/configure-aws-credentials)

v4.0.3

Compare Source

Features

• added release-please action config (0f88004)

Bug Fixes

• add id-token permission to automerge (97834a4)
• cpy syntax on npm package (#​1195) (83b5a56)
• force push packaged files to main (bfd2185)

Miscellaneous Chores

• release 4.0.3 (ca00fd4)

List of commits

e3beaa6 (Update aws-actions/configure-aws-credentials action to v4.0.3, 2025-01-27)

v19.9.2

Update actions/setup-node action to v4.2.0

Notable changes

• Enhance workflows and upgrade publish-actions from 0.2.2 to 0.3.0 by @​aparnajyothi-y in https://github.com/actions/setup-node/pull/1174
• Add recommended permissions section to readme by @​benwells in https://github.com/actions/setup-node/pull/1193
• Configure Dependabot settings by @​HarithaVattikuti in https://github.com/actions/setup-node/pull/1192
• Upgrade @actions/cache to ^4.0.0 by @​priyagupta108 in https://github.com/actions/setup-node/pull/1191
• Upgrade pnpm/action-setup from 2 to 4 by @​dependabot in https://github.com/actions/setup-node/pull/1194
• Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @​dependabot in https://github.com/actions/setup-node/pull/1195
• Upgrade semver from 7.6.0 to 7.6.3 by @​dependabot in https://github.com/actions/setup-node/pull/1196
• Upgrade @​types/jest from 29.5.12 to 29.5.14 by @​dependabot in https://github.com/actions/setup-node/pull/1201
• Upgrade undici from 5.28.4 to 5.28.5 by @​dependabot in https://github.com/actions/setup-node/pull/1205
• @​benwells made their first contribution in https://github.com/actions/setup-node/pull/1193

actions/setup-node (actions/setup-node)

v4.2.0

Compare Source

What's Changed

• Enhance workflows and upgrade publish-actions from 0.2.2 to 0.3.0 by @​aparnajyothi-y in https://github.com/actions/setup-node/pull/1174
• Add recommended permissions section to readme by @​benwells in https://github.com/actions/setup-node/pull/1193
• Configure Dependabot settings by @​HarithaVattikuti in https://github.com/actions/setup-node/pull/1192
• Upgrade @actions/cache to ^4.0.0 by @​priyagupta108 in https://github.com/actions/setup-node/pull/1191
• Upgrade pnpm/action-setup from 2 to 4 by @​dependabot in https://github.com/actions/setup-node/pull/1194
• Upgrade actions/publish-immutable-action from 0.0.3 to 0.0.4 by @​dependabot in https://github.com/actions/setup-node/pull/1195
• Upgrade semver from 7.6.0 to 7.6.3 by @​dependabot in https://github.com/actions/setup-node/pull/1196
• Upgrade @​types/jest from 29.5.12 to 29.5.14 by @​dependabot in https://github.com/actions/setup-node/pull/1201
• Upgrade undici from 5.28.4 to 5.28.5 by @​dependabot in https://github.com/actions/setup-node/pull/1205

New Contributors

• @​benwells made their first contribution in https://github.com/actions/setup-node/pull/1193

Full Changelog: actions/setup-node@v4...v4.2.0

List of commits

bba9ed9 (Update actions/setup-node action to v4.2.0, 2025-01-27)

v19.9.1

7795e13 (Extract npm and docs artifact from subdirectory, 2025-01-23)

v19.9.0

0b1997a (Remove node version from artifact names, 2025-01-23)
d7f9ddd (Use regex matching for npm artifacts on finalize, 2025-01-23)

v19.8.11

05733bc (Restore docker build+test conditions, 2025-01-23)

v19.8.10

Update docker/bake-action action to v6.3.0

Notable changes

• Bump @​docker/actions-toolkit from 0.51.0 to 0.53.0 in https://github.com/docker/bake-action/pull/297

docker/bake-action (docker/bake-action)

v6.3.0

Compare Source

• Bump @​docker/actions-toolkit from 0.51.0 to 0.53.0 in https://github.com/docker/bake-action/pull/297

Full Changelog: docker/bake-action@v6.2.0...v6.3.0

List of commits

5bbc8c6 (Update docker/bake-action action to v6.3.0, 2025-01-23)

v19.8.9

41850e8 (Set correct npm_docs output value, 2025-01-22)

v19.8.8

Update dependency node to v18.20.6

Notable changes

• CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
• CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)
• CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)
• [c03ad5ed63] - build: use rclone instead of aws CLI (Michaël Zasso) #​55617
• [8232463294] - build, tools: drop leading / from r2dir (Richard Lau) #​53951
• [b26bcd3394] - build, tools: copy release assets to staging R2 bucket once built (flakey5) #​51394
• [56df127b7b] - build,tools: simplify upload of shasum signatures (Michaël Zasso) #​53892
• [a63e9372ed] - (CVE-2025-22150) deps: update undici to v5.28.5 (Matteo Collina) nodejs-private/node-private#657
• [da2d177f91] - (CVE-2025-23084) path: fix path traversal in normalize() on Windows (Tobias Nießen) nodejs-private/node-private#555
• [6cc8d58e6f] - (CVE-2025-23085) src: fix HTTP2 mem leak on premature close and ERR_PROTO (RafaelGSS) nodejs-private/node-private#650

nodejs/node (node)

v18.20.6: 2025-01-21, Version 18.20.6 'Hydrogen' (LTS), @​RafaelGSS

Compare Source

This is a security release.

Notable Changes

• CVE-2025-23085 - src: fix HTTP2 mem leak on premature close and ERR_PROTO (Medium)
• CVE-2025-23084 - path: fix path traversal in normalize() on Windows (Medium)

Dependency update:

• CVE-2025-22150 - Use of Insufficiently Random Values in undici fetch() (Medium)

Commits

• [c03ad5ed63] - build: use rclone instead of aws CLI (Michaël Zasso) #​55617
• [8232463294] - build, tools: drop leading / from r2dir (Richard Lau) #​53951
• [b26bcd3394] - build, tools: copy release assets to staging R2 bucket once built (flakey5) #​51394
• [56df127b7b] - build,tools: simplify upload of shasum signatures (Michaël Zasso) #​53892
• [a63e9372ed] - (CVE-2025-22150) deps: update undici to v5.28.5 (Matteo Collina) nodejs-private/node-private#657
• [da2d177f91] - (CVE-2025-23084) path: fix path traversal in normalize() on Windows (Tobias Nießen) nodejs-private/node-private#555
• [6cc8d58e6f] - (CVE-2025-23085) src: fix HTTP2 mem leak on premature close and ERR_PROTO (RafaelGSS) nodejs-private/node-private#650

List of commits

b4067d1 (Update dependency node to v18.20.6, 2025-01-22)